diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 41b5df6..b641826 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -76,7 +76,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Build container image without publishing
-        uses: docker/build-push-action@83bfd93ab480705a7b99a2ed02765137f5ab55ba
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           context: .
           push: false
diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index 2d0c97a..0b784e7 100644
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Extract image metadata
         id: meta
-        uses: docker/metadata-action@c3b064c6d7c32446d6bc214ea075f1caad2de35a
+        uses: docker/metadata-action@a7807070e67ad478bd5f672f499303a151742e53
         with:
           images: ${{ steps.vars.outputs.image_name }}
           tags: |
@@ -58,7 +58,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Build and optionally publish image
-        uses: docker/build-push-action@83bfd93ab480705a7b99a2ed02765137f5ab55ba
+        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}